Security+ PKI Quiz

Which of the following answers refers to a hierarchical system for the creation, management, storage, distribution, and revocation of digital certificates?

• Web of Trust

• PKI

• IaaS

• CA

A type of trusted third party that issues digital certificates used for creating digital signatures and public-private key pairs is known as:

• IKE

• CA

• PKI

• CSP

Which of the following certificate formats is used to store a binary representation of a digital certificate?

• PFX

• DER

• P7B

• PEM

A digital certificate which allows multiple domains to be protected by a single certificate is known as:

• Extended Validation (EV) certificate

• Wildcard certificate

• Subject Alternative Name (SAN) certificate

• Root signing certificate

Which digital signature type allows multiple subdomains to be protected by a single certificate

• Root signing certificate

• Subject Alternative Name (SAN) certificate

• Extended Validation (EV) certificate

• Wildcard certificate

"Certificate chaining" refers to a process of verifying the authenticity of a newly received digital certificate. The process involves checking all of the certificates in the chain of certificates from a trusted root CA, through any intermediate CAs, down to the certificate issued to the end user. A new certificate can only be trusted if each certificate in that certificate's chain is properly issued and valid.

• True

• False

Copies of lost private encryption keys can be retrieved from a key escrow by recovery agents. A recovery agent is an individual with access to key database and permission level allowing him/her to extract keys from escrow.

• True

• False

A trusted third-party storage solution providing a backup source for cryptographic keys is referred to as:

• Key escrow

• TPM

• Recovery agent

• CA

Which of the answers listed below refer to examples of PKI trusted models?

Choose all that apply

• Single CA model

• Hierarchical model (root CA + intermediate CAs)

• Mesh model (cross-certifying CAs)

• Web of trust model (All CAs act as root CAs)

• Client-server mutual authentication model

A security mechanism that allows HTTPS websites to resist impersonation by attackers using fraudulent certificates is known as:

• Unified Threat Management (UTM)

• HTTP Public Key Pinning (HPKP)

• Data Execution Prevention (DEP)

• Web Application Firewall (WAF)